Cybersecurity Best Practices for Fleet Management Companies
The number of cyber-attack in recent times is on the rise throughout the world. Recent figures give an evident representation that the relative accessibility of data and its value is too tempting to pass up. Per a report by Scalar Security, the number of organizations reporting data breach or exposure of sensitive data in twelve months has increased year-on-year to 8% for the last three years.
One of the most recent cyber-attack cases was in November 2017 when Uber paid hackers a $100,000 cyber bribe to destroy stolen data. According to Uber, hackers downloaded names and license numbers of approximately 600,000 drivers in the US and personal information of more than 50 million Uber users globally.
Businesses in Canada too are facing cyber-threat, the number of companies experiencing cybercrime related incidents is only increasing. Per a survey by The Ponemon Institute across all industries found that more than 20,400 records were breached because of cyber-crime in 2016 alone. The average cost of the data breach was around $6 million while the average cost per record of a breach was about $260.
In the world of fleet management, connected fleet provides uncountable benefits like safety, reduced downtime, efficiency, convenience, and better profit margin. While benefits are many, it also opens doors for cyber-crime. Cybersecurity has become one of the priorities for fleet managers. Some of the basics for fleet managers are checking the security and privacy policies of third-party service providers and device manufacturers and not connecting to any unknown/untrusted devices. Below are some of the industry best practices to mitigate cyber-risk and setting-up a robust cybersecurity procedure
It is essential to update all software to keep up with security regularly. These software updates correct for discovered security holes fixes bugs, etc. which can be used by hackers to breach data.
Telematics devices send their data to storage and processing servers can be protected by limiting physical access only to authorized personnel. Overall, the cloud environment can be protected by implementing firewalls, anti-virus, access control, and by actively monitoring the cloud. It is essential to understand that even the most secure systems are not one-hundred percent secure to breaches. In case of a security breach, it is vital to be capable of mitigating the damage caused by any attack.
Implementation of secure data transfer
Telematics device transfer data from the fleet to the central server mainly over a cellular connection which can have their own weaknesses. Use of encryption to secure communication is the best practice. Encryption encodes the message which can only be read by the sender and receiver while to an outsider like a hacker, this encoded message would appear as a collection of symbols.
Training employee and drivers
Providing training to employees and drivers on the importance of cybersecurity can improve their knowledge and awareness on cybersecurity. Empowering employees, drivers, and workers to identify common cyber threats will be beneficial. Security awareness training helps in understanding vulnerabilities and threats to fleet operations and also make employees and drivers aware of their responsibilities and accountabilities when using the internet for transferring data.
Using cryptographically robust random numbers
Generating a random number is used by many algorithms used in security. It is significant that the source of random numbers delivers cryptographically robust random numbers. If the randomly generated numbers are not cryptographically secure, the strengths of the algorithms which are using these numbers can be extremely weak.
Implementing fleet-wide cybersecurity programs and best practices can be a daunting task.
Latium can offer cybersecurity services when they are managing the client’s vehicle and asset data, but if the data is not collected by Latium then they cannot guarantee complete security.
Want to learn more about how technology will change your fleet? Contact us today!